November 2016 - tbb-commits - lists.torproject.org

[tor-browser-bundle/master] Release preparations for 6.5a5
by gk＠torproject.org 30 Nov '16

30 Nov '16

commit b731f62c02701ecf059f4d171d8f7c98fdd917c3 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Nov 30 20:35:44 2016 +0000 Release preparations for 6.5a5 --- Bundle-Data/Docs/ChangeLog.txt | 7 +++++++ gitian/versions.alpha | 8 ++++---- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 16 insertions(+), 9 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 4f57467..38c27ef 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,10 @@ +Tor Browser 6.5a5 -- December 1 2016 + * All Platforms + * Update Firefox to 45.5.1esr + * Update NoScript to 2.9.5.2 + * Linux + * Bug 20691: Updater breaks if unix domain sockets are used + Tor Browser 6.5a4-hardened -- November 16 2016 * All Platforms * Update Firefox to 45.5.0esr diff --git a/gitian/versions.alpha b/gitian/versions.alpha index 432cf29..e3bc120 100755 --- a/gitian/versions.alpha +++ b/gitian/versions.alpha @@ -10,11 +10,11 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.5.0esr +FIREFOX_VERSION=45.5.1esr TORBROWSER_UPDATE_CHANNEL=alpha -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build3 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.5-1-build1 TOR_TAG=tor-0.2.9.5-alpha TORLAUNCHER_TAG=0.2.10.2 TORBUTTON_TAG=1.9.6.7 @@ -68,7 +68,7 @@ NSIS_VER=2.51 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.5.2-fx+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -102,7 +102,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 +NOSCRIPT_HASH=ed71ca922790e81bc5e8c6a87bb81f394a38676ac37d1fba518a6a428d128dd5 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 2e48e2c..c0559e2 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -19,7 +19,7 @@ build_targets: osx32: Darwin_x86-gcc3 osx64: Darwin_x86_64-gcc3 channels: - alpha: 6.5a4 + alpha: 6.5a5 release: 6.0.1 versions: 6.0.1: @@ -33,11 +33,11 @@ versions: osx32: minSupportedOSVersion: 10.8 detailsURL: https://blog.torproject.org/blog/end-life-plan-tor-browser-32-bit-macs#upda… - 6.5a4: - platformVersion: 45.5.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-65a4-released + 6.5a5: + platformVersion: 45.5.1 + detailsURL: https://blog.torproject.org/blog/tor-browser-65a5-released incremental_from: - - 6.5a3 + - 6.5a4 migrate_archs: osx32: osx64 osx32:

1 0

[tor-browser/tor-browser-45.5.1esr-6.5-1] fixup! Bug #4234: Use the Firefox Update Process for Tor Browser.
by gk＠torproject.org 30 Nov '16

30 Nov '16

commit fecc8672b045889a4a0560ff4e69fe5fc0fcefd7 Author: Kathy Brade <brade(a)pearlcrescent.com> Date: Thu Nov 17 15:23:10 2016 -0500 fixup! Bug #4234: Use the Firefox Update Process for Tor Browser. During staged updates, ignore Unix domain sockets when copying the contents of the existing installation directory. Fixes bug 20691. --- toolkit/mozapps/update/updater/updater.cpp | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/toolkit/mozapps/update/updater/updater.cpp b/toolkit/mozapps/update/updater/updater.cpp index d6d0f09..ae3b2aa 100644 --- a/toolkit/mozapps/update/updater/updater.cpp +++ b/toolkit/mozapps/update/updater/updater.cpp @@ -825,6 +825,13 @@ static int ensure_copy_recursive(const NS_tchar *path, const NS_tchar *dest, } #endif +#ifdef XP_UNIX + // Ignore Unix domain sockets. See #20691. + if (S_ISSOCK(sInfo.st_mode)) { + return 0; + } +#endif + if (!S_ISDIR(sInfo.st_mode)) { return ensure_copy(path, dest); }

1 0

[tor-browser-bundle/maint-6.0] No fn anymore
by gk＠torproject.org 30 Nov '16

30 Nov '16

commit e334a6e7f0b7eb39c9eba397e9f539abed5a4aca Author: Georg Koppen <gk(a)torproject.org> Date: Wed Nov 30 08:27:09 2016 +0000 No fn anymore --- gitian/versions | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gitian/versions b/gitian/versions index c50abce..062ec84 100755 --- a/gitian/versions +++ b/gitian/versions @@ -68,7 +68,7 @@ NSIS_VER=2.51 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.5.2-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.5.2-fx+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz

1 0

[tor-browser-bundle/maint-6.0] Let's take the new NoScript as well
by gk＠torproject.org 30 Nov '16

30 Nov '16

commit f2ab4fe8a87780fafa7c92104b9af791a7a30dc7 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Nov 30 08:21:30 2016 +0000 Let's take the new NoScript as well --- Bundle-Data/Docs/ChangeLog.txt | 1 + gitian/versions | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index 25a499b..6aeb49b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,6 +1,7 @@ Tor Browser 6.0.7 -- November 30 * All Platforms * Update Firefox to 45.5.1esr + * Update NoScript to 2.9.5.2 Tor Browser 6.0.6 -- November 15 * All Platforms diff --git a/gitian/versions b/gitian/versions index eaa125e..c50abce 100755 --- a/gitian/versions +++ b/gitian/versions @@ -68,7 +68,7 @@ NSIS_VER=2.51 ## File names for the source packages OPENSSL_PACKAGE=openssl-${OPENSSL_VER}.tar.gz GMP_PACKAGE=gmp-${GMP_VER}.tar.bz2 -NOSCRIPT_PACKAGE=noscript_security_suite-2.9.0.14-fx+fn+sm.xpi +NOSCRIPT_PACKAGE=noscript_security_suite-2.9.5.2-fx+fn+sm.xpi TOOLCHAIN4_OLD_PACKAGE=multiarch-darwin11-cctools127.2-gcc42-5666.3-llvmgcc42-2336.1-Linux-120724.tar.xz CCTOOLS_PACKAGE=cctools.tar.gz OSXSDK_PACKAGE=MacOSX10.7.sdk.tar.gz @@ -102,7 +102,7 @@ GMP_HASH=752079520b4690531171d0f4532e40f08600215feefede70b24fabdc6f1ab160 OSXSDK_HASH=da77bb0003fcca5ea8c4e8cb2da8828ded750c54afdcac29ec6f3b46ad5e3adf OSXSDK_OLD_HASH=6602d8d5ddb371fbc02e2a5967d9bd0cd7358d46f9417753c8234b923f2ea6fc TOOLCHAIN4_OLD_HASH=65c1b2d302358a6b95a26c6828a66908a199276193bb0b268f2dcc1a997731e9 -NOSCRIPT_HASH=39bc71be20c318578239ea791c0341dbfcd13b33559af080cea386eeec08b337 +NOSCRIPT_HASH=ed71ca922790e81bc5e8c6a87bb81f394a38676ac37d1fba518a6a428d128dd5 CCTOOLS_HASH=e908fdebc2886ee5491ebfc7e7950af451b3c4e2439c2d7a923ed06ad05113e4 MSVCR100_HASH=1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067 PYCRYPTO_HASH=f2ce1e989b272cfcb677616763e0a2e7ec659effa67a88aa92b3a65528f60a3c

1 0

[tor-browser-bundle/maint-6.0] Release preparations for 6.0.7
by gk＠torproject.org 30 Nov '16

30 Nov '16

commit b182b6b1cce220e5fcbd422ead1dda3ca2d2e1d7 Author: Georg Koppen <gk(a)torproject.org> Date: Wed Nov 30 08:04:03 2016 +0000 Release preparations for 6.0.7 Changelog update, config.yml update and version bump --- Bundle-Data/Docs/ChangeLog.txt | 4 ++++ gitian/versions | 4 ++-- tools/update-responses/config.yml | 10 +++++----- 3 files changed, 11 insertions(+), 7 deletions(-) diff --git a/Bundle-Data/Docs/ChangeLog.txt b/Bundle-Data/Docs/ChangeLog.txt index dd961a1..25a499b 100644 --- a/Bundle-Data/Docs/ChangeLog.txt +++ b/Bundle-Data/Docs/ChangeLog.txt @@ -1,3 +1,7 @@ +Tor Browser 6.0.7 -- November 30 + * All Platforms + * Update Firefox to 45.5.1esr + Tor Browser 6.0.6 -- November 15 * All Platforms * Update Firefox to 45.5.0esr diff --git a/gitian/versions b/gitian/versions index 6fed387..eaa125e 100755 --- a/gitian/versions +++ b/gitian/versions @@ -10,11 +10,11 @@ DATA_OUTSIDE_APP_DIR=1 VERIFY_TAGS=1 -FIREFOX_VERSION=45.5.0esr +FIREFOX_VERSION=45.5.1esr TORBROWSER_UPDATE_CHANNEL=release -TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1-build3 +TORBROWSER_TAG=tor-browser-${FIREFOX_VERSION}-6.0-1-build1 TOR_TAG=tor-0.2.8.9 TORLAUNCHER_TAG=0.2.9.4 TORBUTTON_TAG=1.9.5.12 diff --git a/tools/update-responses/config.yml b/tools/update-responses/config.yml index 4d21f0e..665642a 100644 --- a/tools/update-responses/config.yml +++ b/tools/update-responses/config.yml @@ -16,13 +16,13 @@ build_targets: osx64: Darwin_x86_64-gcc3 channels: alpha: 6.5a2 - release: 6.0.6 + release: 6.0.7 versions: - 6.0.6: - platformVersion: 45.5.0 - detailsURL: https://blog.torproject.org/blog/tor-browser-606-released + 6.0.7: + platformVersion: 45.5.1 + detailsURL: https://blog.torproject.org/blog/tor-browser-607-released incremental_from: - - 6.0.5 + - 6.0.6 migrate_archs: osx32: osx64 osx32:

1 0

[gitian-builder/tor-browser-builder-4] Bug 20352: use poweroff instead of halt in libexec/stop-target
by gk＠torproject.org 25 Nov '16

25 Nov '16

commit 0557666cb7d3bf474cb36d5d755438b06af86b7d Author: Nicolas Vigier <boklm(a)torproject.org> Date: Fri Nov 25 17:40:45 2016 +0100 Bug 20352: use poweroff instead of halt in libexec/stop-target --- libexec/stop-target | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libexec/stop-target b/libexec/stop-target index 6db547d..46714dc 100755 --- a/libexec/stop-target +++ b/libexec/stop-target @@ -11,7 +11,7 @@ case $VMSW in KVM) if [ ! -e var/target.pid ]; then exit; fi - on-target -u root halt + on-target -u root poweroff sleep 5 if [ ! -e var/target.pid ]; then exit; fi

1 0

[torbutton/master] Bug 20753: Remove obsolete StartPage L10n strings
by gk＠torproject.org 25 Nov '16

25 Nov '16

commit 88cf6251a1ca3c02361673f9a5d542290382c998 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Wed Nov 23 14:51:37 2016 -0800 Bug 20753: Remove obsolete StartPage L10n strings Translators were asking whether they should be localizing the StartPage privacy policy link. As we aren't using these strings anyhow, it seems better to remove them so we don't waste translators' time. --- src/chrome/locale/en/aboutTor.dtd | 1 - src/chrome/locale/en/aboutTor.properties | 6 ------ 2 files changed, 7 deletions(-) diff --git a/src/chrome/locale/en/aboutTor.dtd b/src/chrome/locale/en/aboutTor.dtd index 9e44fc2..7f89286 100644 --- a/src/chrome/locale/en/aboutTor.dtd +++ b/src/chrome/locale/en/aboutTor.dtd @@ -20,7 +20,6 @@ <!ENTITY aboutTor.search.label "Search"> -<!ENTITY aboutTor.searchSPPost.link "https://startpage.com/rth/search"> <!ENTITY aboutTor.searchDDGPost.link "https://duckduckgo.com/html/"> <!ENTITY aboutTor.searchDCPost.link "https://search.disconnect.me/searchTerms/search?ses=Google&location_opt…"> diff --git a/src/chrome/locale/en/aboutTor.properties b/src/chrome/locale/en/aboutTor.properties index 76192f4..811073e 100644 --- a/src/chrome/locale/en/aboutTor.properties +++ b/src/chrome/locale/en/aboutTor.properties @@ -2,12 +2,6 @@ # See LICENSE for licensing information. # vim: set sw=2 sts=2 ts=8 et: -aboutTor.searchSP.privacy=Search <a href="%1$S">securely</a> with <a href="%2$S">Startpage</a>. -# The following string is a link which replaces %1$S above. -aboutTor.searchSP.privacy.link=https://startpage.com/eng/protect-privacy.html -# The following string is a link which replaces %2$S above. -aboutTor.searchSP.search.link=https://startpage.com/ - aboutTor.searchDDG.privacy=Search <a href="%1$S">securely</a> with <a href="%2$S">DuckDuckGo</a>. # The following string is a link which replaces %1$S above. aboutTor.searchDDG.privacy.link=https://duckduckgo.com/privacy.html

1 0

[tor-browser/tor-browser-45.5.0esr-6.5-1] Bug 16622: Pref to spoof time zone as UTC
by gk＠torproject.org 24 Nov '16

24 Nov '16

commit d973b7ebaa5e93ee8e4b6b9f07ec51333687087b Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Nov 14 10:22:09 2016 -0800 Bug 16622: Pref to spoof time zone as UTC --- toolkit/xre/nsAppRunner.cpp | 9 +++++++++ toolkit/xre/nsAppRunner.h | 3 +++ 2 files changed, 12 insertions(+) diff --git a/toolkit/xre/nsAppRunner.cpp b/toolkit/xre/nsAppRunner.cpp index f0cdd41..81f949a 100644 --- a/toolkit/xre/nsAppRunner.cpp +++ b/toolkit/xre/nsAppRunner.cpp @@ -4680,6 +4680,8 @@ XREMain::XRE_mainRun() OverrideDefaultLocaleIfNeeded(); + UseUTCTimeZoneIfNeeded(); + #ifdef MOZ_CRASHREPORTER nsCString userAgentLocale; // Try a localized string first. This pref is always a localized string in @@ -5385,3 +5387,10 @@ OverrideDefaultLocaleIfNeeded() { setlocale(LC_ALL, "C.UTF-8") || setlocale(LC_ALL, "C"); } } + +void +UseUTCTimeZoneIfNeeded() { + if (mozilla::Preferences::GetBool("privacy.use_utc_timezone", false)) { + SaveToEnv("TZ=UTC"); + } +} diff --git a/toolkit/xre/nsAppRunner.h b/toolkit/xre/nsAppRunner.h index c7048e0..cab42a4 100644 --- a/toolkit/xre/nsAppRunner.h +++ b/toolkit/xre/nsAppRunner.h @@ -96,6 +96,9 @@ WriteConsoleLog(); void OverrideDefaultLocaleIfNeeded(); +void +UseUTCTimeZoneIfNeeded(); + #ifdef XP_WIN void UseParentConsole();

1 0

[tor-browser/tor-browser-45.5.0esr-6.5-1] fixup! TB4: Tor Browser's Firefox preference overrides.
by gk＠torproject.org 24 Nov '16

24 Nov '16

commit 76d74d18040e22fdb6b100b4638078c2e83fa195 Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Nov 14 10:46:45 2016 -0800 fixup! TB4: Tor Browser's Firefox preference overrides. --- browser/app/profile/000-tor-browser.js | 1 + 1 file changed, 1 insertion(+) diff --git a/browser/app/profile/000-tor-browser.js b/browser/app/profile/000-tor-browser.js index 1f1db9e..a5b6aa9 100644 --- a/browser/app/profile/000-tor-browser.js +++ b/browser/app/profile/000-tor-browser.js @@ -147,6 +147,7 @@ pref("ui.use_standins_for_native_colors", true); // https://bugzilla.mozilla.org // bug 18950 for more details. pref("browser.reader.detectedFirstArticle", true); pref("reader.parse-on-load.enabled", false); +pref("privacy.use_utc_timezone", true); // Third party stuff pref("network.cookie.cookieBehavior", 1);

1 0

[torbutton/master] Bug 16622: Timezone spoofing moved to tor-browser.git
by gk＠torproject.org 24 Nov '16

24 Nov '16

commit 86dd5f30f7b6b29d6eb7e1947c225cd3cc43021b Author: Arthur Edelstein <arthuredelstein(a)gmail.com> Date: Mon Nov 14 10:49:20 2016 -0800 Bug 16622: Timezone spoofing moved to tor-browser.git --- src/chrome/content/torbutton.js | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index 139cb41..c0fe710 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -891,17 +891,6 @@ function torbutton_update_toolbutton() torbutton_get_property_string(tooltipKey)); } -// Bug 1506 P4: Timezone spoofing is pretty important -function torbutton_set_timezone() { - /* Windows doesn't call tzset() automatically.. Linux and MacOS - * both do though.. FF3.5 now calls _tzset() for us on windows. - */ - torbutton_log(3, "Setting timezone to UTC"); - var environ = Components.classes["@mozilla.org/process/environment;1"] - .getService(Components.interfaces.nsIEnvironment); - environ.set("TZ", "UTC"); -} - // Bug 1506 P3: Support code for language+uagent spoofing function torbutton_get_general_useragent_locale() { try { @@ -1747,8 +1736,6 @@ function torbutton_update_fingerprinting_prefs() { m_tb_prefs.setBoolPref("extensions.torbutton.resize_new_windows", mode); - // XXX: How do we undo timezone? - // Force prefs to be synced to disk m_tb_prefs.savePrefFile(null); } @@ -2026,9 +2013,6 @@ function torbutton_do_startup() // Bug 1506: Should probably be moved to an XPCOM component torbutton_do_main_window_startup(); - // Bug 1506: Still want to do this - torbutton_set_timezone(); - // For charsets torbutton_update_fingerprinting_prefs();

1 0